Win32:Trojano-1165 [Trj]

alex -  
 Utilisateur anonyme -
bonjours. voila, mon pc était serieusement infecté, et j'ai déniché plusieurs foyers que j'ai détruit, mai pendant mon scan Avast, j'ai trouvé plusieurs fichiers que je n'ai pas suprimés, a cause de leur présence dans le dossier systeme de windows.

ils sont infectés par Win32:Trojano-1165 [Trj] et en voici la liste.

c:\windows\system32\kjryoely.dll
kwqpnffb.dll
kyrxhmaf.dll
gbabpprn.dll
oelshgda.dll
hcgffjrt.dll
aybbdcsc.dll
quijwvvw.dll
hgovivhk.dll
jnvghiem.dll
tojwmulq.dll
vkvvnvqp.dll
vvcdffli.dll
wvtsijvso.dll
xlyqoyyx.dll
xuowfbuf.dll
kbjvsfip.dll
ayxkoj.dll

voila. merci d'avence pour l'aide

12 réponses

  1. alex
     
    aussi une question qui n'a rien a voir, a propos de sunbelt kerio.
    c un freeware? car on me dis que je suis arrivé a la fin de ma demo?
    puisque je l'ai eu ici, je me dis que vous devez savoir...

    ---------------------------

    Logfile of HijackThis v1.99.1
    Scan saved at 23:50:38, on 11/12/2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\WINDOWS\ATKKBService.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
    C:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\WINDOWS\System32\svchost.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Giganology\Gigaget\GigagetShell.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
    C:\WINDOWS\vsnpstd2.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
    C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Maxthon\Maxthon.exe
    C:\Program Files\Azureus\Azureus.exe
    C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: GigagetIEHelper Class - {111CAA23-6F4F-42AC-8555-B48C1D87BBAB} - C:\WINDOWS\System32\gigagetbho_v10.dll
    O2 - BHO: (no name) - {35F7813A-AF74-4474-B1DC-7EE6FB6C43C6} - C:\WINDOWS\System32\mwejflbs.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O2 - BHO: (no name) - {C1942C19-1FA8-4907-9B00-7AAC6C39FBA1} - C:\WINDOWS\System32\ssqpp.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [Gigaget] "C:\Program Files\Giganology\Gigaget\GigagetShell.exe" /s
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\System32\NeroCheck.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
    O4 - HKLM\..\Run: [SNPSTD2] C:\WINDOWS\vsnpstd2.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [eMuleAutoStart] C:\coincoin\eMule\emule.exe -AutoStart
    O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
    O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Download All by Gigaget - C:\Program Files\Giganology\Gigaget\getallurl.htm
    O8 - Extra context menu item: &Download by Gigaget - C:\Program Files\Giganology\Gigaget\geturl.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{4897C1FD-A695-4825-9468-089435E0BD2F}: NameServer = 195.238.2.22 195.238.2.21
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: ssqpp - C:\WINDOWS\System32\ssqpp.dll
    O20 - Winlogon Notify: wqjpxdex - c:\windows\system32\wqjpxdex.dll (file missing)
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Belkin 54g Wireless USB Network Adapter (Belkin 54g Wireless USB Network Adapter Service) - Unknown owner - C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
    O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
    O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    0
  2. Utilisateur anonyme
     
    Salut

    Oui, Kerio reste gratuit ;-)

    telecharge
    http://www.atribune.org/ccount/click.php?id=4

    double clic dessus choisis "start for vundo"
    attends quelques minutes, quand le scan est terminé clic sur "remove vundo"
    un message te demandera si tu veux supprimes les fichiers sur "yes"
    Quand il a terminé, clic sur "yes" ton ordinateur devrait redemarrer sinon, fais le par toit même
    Une fois qu'il a redemarré colle le rapport C:\vundofix.txt et un nouveau rapport hijackthis stp
    0
  3. alex
     
    VundoFix V6.2.6

    Checking Java version...

    Java version is 1.5.0.6

    Java version is 1.5.0.7

    Scan started at 00:51:12 12/12/2006

    Listing files found while scanning....

    C:\WINDOWS\System32\ssqpp.dll
    C:\WINDOWS\System32\ppqss.ini
    C:\WINDOWS\System32\ppqss.bak2
    C:\WINDOWS\System32\ppqss.ini2

    Beginning removal...

    Attempting to delete C:\WINDOWS\System32\ssqpp.dll
    C:\WINDOWS\System32\ssqpp.dll Has been deleted!

    Attempting to delete C:\WINDOWS\System32\ppqss.ini
    C:\WINDOWS\System32\ppqss.ini Has been deleted!

    Attempting to delete C:\WINDOWS\System32\ppqss.bak2
    C:\WINDOWS\System32\ppqss.bak2 Has been deleted!

    Attempting to delete C:\WINDOWS\System32\ppqss.ini2
    C:\WINDOWS\System32\ppqss.ini2 Has been deleted!

    Performing Repairs to the registry.
    Done!

    Logfile of HijackThis v1.99.1
    Scan saved at 00:59:25, on 12/12/2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\WINDOWS\ATKKBService.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
    C:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG.exe
    C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Giganology\Gigaget\GigagetShell.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
    C:\WINDOWS\vsnpstd2.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\WINDOWS\system32\dumprep.exe
    C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
    C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
    C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
    C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: GigagetIEHelper Class - {111CAA23-6F4F-42AC-8555-B48C1D87BBAB} - C:\WINDOWS\System32\gigagetbho_v10.dll
    O2 - BHO: (no name) - {35F7813A-AF74-4474-B1DC-7EE6FB6C43C6} - C:\WINDOWS\System32\mwejflbs.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: (no name) - {88D4D1FA-6888-4009-BBB8-034C0ABBD169} - C:\WINDOWS\System32\ssqpp.dll (file missing)
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [Gigaget] "C:\Program Files\Giganology\Gigaget\GigagetShell.exe" /s
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\System32\NeroCheck.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
    O4 - HKLM\..\Run: [SNPSTD2] C:\WINDOWS\vsnpstd2.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [eMuleAutoStart] C:\coincoin\eMule\emule.exe -AutoStart
    O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
    O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Download All by Gigaget - C:\Program Files\Giganology\Gigaget\getallurl.htm
    O8 - Extra context menu item: &Download by Gigaget - C:\Program Files\Giganology\Gigaget\geturl.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: wqjpxdex - c:\windows\system32\wqjpxdex.dll (file missing)
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Belkin 54g Wireless USB Network Adapter (Belkin 54g Wireless USB Network Adapter Service) - Unknown owner - C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
    O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
    O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    0
  4. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  5. Utilisateur anonyme
     
    Ok, tu peux jeter VundoFix

    Fait ce scan anti-virus en ligne avec Internet Explorer, accepte l'active X; la barre anti-popup du SP2 (en haut) va se mettre à clignoter, clique dessus et choisis "accepter l'active X" pour faire fonctionner le scan anti-virus.
    Une fois qu'il a terminé colle le rapport ici stp

    https://www.bitdefender.com/toolbox/
    0
  6. alex
     
    Could not load the Online Scanner!

    impossible, meme en coupant mon firewall.
    0
  7. Utilisateur anonyme
     
    Tu as quoi comme anti-spywares ?

    Puis fai ceci

    Télécharge ComboFix
    http://download.bleepingcomputer.com/sUBs/combofix.exe

    Ferme ton navigateur web avant d'exécuter ce programme
    Double-clique dessus et appuye sur "Y" pour continuer

    Attends quelques minutes..un rapport va s'ouvrir enregistre son contenu, puis copie et colle le ici stp
    0
  8. alex
     
    AVG Anti-Spyware

    metal.kanar - 06-12-12 12:56:21,37 Service Pack 1
    ComboFix 06.10.19 - Running from: "C:\Documents and Settings\metal.kanar\Bureau\anti v solution"

    (((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

    C:\WINDOWS\system32\mc-110-12-0000144.exe
    C:\deskbar_e37.exe
    C:\Program Files\Inetget2
    C:\Program Files\Fichiers communs\{40E5EF09-070A-1036-0715-050503010021}

    ((((((((((((((((((((((((((((((( Files Created from 2006-11-12 to 2006-12-12 ))))))))))))))))))))))))))))))))))

    2006-12-12 00:45 106,555 --a------ C:\WINDOWS\system32\qvdakqno.dll
    2006-12-11 23:46 106,555 --a------ C:\WINDOWS\system32\wqsoypws.dll
    2006-12-11 15:16 106,555 --a------ C:\WINDOWS\system32\puqgwaky.dll
    2006-12-11 02:53 106,555 --a------ C:\WINDOWS\system32\vbcbjflg.dll
    2006-12-11 00:42 106,555 --a------ C:\WINDOWS\system32\wvtsjvso.dll
    2006-12-10 22:22 106,555 --a------ C:\WINDOWS\system32\kyrxhmaf.dll
    2006-12-10 18:37 106,555 --a------ C:\WINDOWS\system32\oybbdcsc.dll
    2006-12-10 15:24 106,555 --a------ C:\WINDOWS\system32\vucdffli.dll
    2006-12-09 22:46 106,555 --a------ C:\WINDOWS\system32\tojwmulq.dll
    2006-12-09 14:11 106,555 --a------ C:\WINDOWS\system32\hchffjrt.dll
    2006-12-09 02:13 106,555 --a------ C:\WINDOWS\system32\kbjvsfip.dll
    2006-12-09 01:56 106,555 --a------ C:\WINDOWS\system32\kwqpnffb.dll
    2006-12-08 22:58 106,555 --a------ C:\WINDOWS\system32\jnvghiem.dll
    2006-12-08 22:35 106,555 --a------ C:\WINDOWS\system32\kjryoely.dll
    2006-12-08 21:41 98,304 --a------ C:\WINDOWS\System32CmdLineExt.dll
    2006-12-08 18:21 106,555 --a------ C:\WINDOWS\system32\vkvvnvqp.dll
    2006-12-08 16:18 106,555 --a------ C:\WINDOWS\system32\awhlqvwt.dll
    2006-12-08 14:59 88,340 --a------ C:\WINDOWS\system32\vcyulsax.exe
    2006-12-08 14:57 106,555 --a------ C:\WINDOWS\system32\hgouivhk.dll
    2006-12-08 01:18 90,164 ---hs---- C:\WINDOWS\system32\mljji.dll
    2006-12-08 00:58 51,725 --a------ C:\WINDOWS\is67003.exe
    2006-12-08 00:56 106,555 --a------ C:\WINDOWS\system32\oelshgda.dll
    2006-12-07 23:58 42,516 --a------ C:\WINDOWS\system32\mwejflbs.dll
    2006-12-07 23:58 126,996 --a------ C:\WINDOWS\system32\cpqlawax.dll
    2006-12-07 19:22 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
    2006-12-07 19:10 90,164 ---hs---- C:\WINDOWS\system32\awtqo.dll
    2006-12-07 18:57 106,555 --a------ C:\WINDOWS\system32\gbabpprn.dll
    2006-12-07 16:49 106,555 --a------ C:\WINDOWS\system32\qujdwvvw.dll
    2006-12-07 11:38 90,164 ---hs---- C:\WINDOWS\system32\jkkli.dll
    2006-12-07 11:27 106,555 --a------ C:\WINDOWS\system32\xlyqoyyx.dll
    2006-12-07 01:42 106,555 --a------ C:\WINDOWS\system32\ayxkojlb.dll
    2006-12-06 22:09 106,555 --a------ C:\WINDOWS\system32\xuowfbuf.dll
    2006-12-06 20:22 588 --a------ C:\WINDOWS\system32\sstqp.dll
    2006-12-06 20:21 309,812 ---hs---- C:\WINDOWS\system32\jkhfe.dll
    2006-12-06 19:04 28,672 --a------ C:\WINDOWS\system32\xpda.exe
    2006-12-06 17:29 28,672 --a------ C:\WINDOWS\system32\jjlia.exe
    2006-12-06 13:22 28,672 --a------ C:\WINDOWS\system32\fuqofw.exe
    2006-12-06 09:24 28,672 --a------ C:\WINDOWS\system32\xklqgu.exe
    2006-12-06 04:55 28,672 --a------ C:\WINDOWS\system32\bauw.exe
    2006-12-05 22:17 28,672 --a------ C:\WINDOWS\system32\gdusdxzs.exe
    2006-12-05 20:26 28,672 --a------ C:\WINDOWS\system32\roamfij.exe
    2006-12-05 19:25 28,672 --a------ C:\WINDOWS\system32\pghkd.exe
    2006-12-05 15:17 28,672 --a------ C:\WINDOWS\system32\jacnkw.exe
    2006-12-05 14:52 28,672 --a------ C:\WINDOWS\system32\gcjcnqtq.exe
    2006-12-05 13:38 28,672 --a------ C:\WINDOWS\system32\iimeopz.exe
    2006-12-04 20:15 28,672 --a------ C:\WINDOWS\system32\xrmdlud.exe
    2006-12-04 18:43 28,672 --a------ C:\WINDOWS\system32\rrxls.exe
    2006-11-20 01:30 89,088 --a------ C:\WINDOWS\system32\atl71.dll
    2006-11-20 01:30 24,576 --a------ C:\WINDOWS\system32\msxml3a.dll
    2006-11-20 01:29 35 --a------ C:\WINDOWS\system32\RTELM.dll

    (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

    2006-12-12 12:58 -------- d-------- C:\Program Files\Fichiers communs
    2006-12-12 12:53 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Xfire
    2006-12-12 12:52 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\OpenOffice.org2
    2006-12-12 02:56 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Azureus
    2006-12-12 00:59 -------- d-------- C:\Program Files\Hijackthis Version Fran‡aise
    2006-12-11 17:53 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\U3
    2006-12-11 01:30 -------- d-------- C:\Program Files\DaemonTools_WhenUSave_Installer
    2006-12-09 01:20 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Adobe
    2006-12-08 23:01 -------- d-------- C:\Program Files\DAEMON Tools
    2006-12-08 22:31 639224 --a------ C:\WINDOWS\system32\drivers\sptd.sys
    2006-12-08 20:14 -------- d-------- C:\Program Files\Adobe
    2006-12-08 20:11 -------- d--h----- C:\Program Files\InstallShield Installation Information
    2006-12-08 18:21 -------- d-------- C:\Program Files\VSToolbar
    2006-12-07 19:22 -------- d-------- C:\Program Files\Grisoft
    2006-12-07 01:27 -------- d-------- C:\Program Files\OpenOffice.org 2.0
    2006-12-05 14:50 -------- d---s---- C:\Program Files\Xfire
    2006-12-05 00:59 -------- d-------- C:\Program Files\rpg maker
    2006-11-22 20:29 101888 --a------ C:\WINDOWS\system32\services.exe
    2006-11-22 19:58 44032 --a------ C:\WINDOWS\system32\ftp.exe
    2006-11-22 19:58 17920 --a------ C:\WINDOWS\system32\tftp.exe
    2006-11-22 17:28 -------- d-------- C:\Program Files\Chaos Shredder2.3FR
    2006-11-21 20:49 -------- d-------- C:\Program Files\Yahoo!
    2006-11-21 20:49 -------- d-------- C:\Program Files\CCleaner
    2006-11-13 18:42 -------- d---s---- C:\Documents and Settings\metal.kanar\Application Data\Microsoft
    2006-11-11 02:32 15939 --a------ C:\WINDOWS\system32\drivers\AegisP.sys
    2006-11-11 02:31 -------- d-------- C:\Program Files\Belkin
    2006-11-06 22:00 163644 --a------ C:\WINDOWS\system32\drivers\secdrv.sys
    2006-11-06 17:49 -------- d-------- C:\Program Files\FairUse Wizard
    2006-10-31 01:42 -------- d-------- C:\Program Files\QuickTime
    2006-10-31 01:42 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Apple Computer
    2006-10-31 01:41 -------- d-------- C:\Program Files\Apple Software Update
    2006-10-26 17:28 181580 --a------ C:\WINDOWS\YazzleBundle-1125.exe
    2006-10-26 17:28 1024 --ahs---- C:\WINDOWS\system32\is941.exe
    2006-10-25 22:47 -------- d-------- C:\Program Files\MSN Messenger
    2006-10-24 18:51 135168 --a------ C:\WINDOWS\system32\sfc_os.dll
    2006-10-24 18:50 13664 --ah----- C:\WINDOWS\system32\ksbar.exe
    2006-10-24 18:33 562980 --a------ C:\WINDOWS\system32\winsms.exe
    2006-10-24 18:20 -------- d-------- C:\Program Files\ATI Technologies
    2006-10-23 11:43 114392 --a------ C:\WINDOWS\system32\fhm.exe
    2006-10-22 11:53 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll
    2006-10-22 11:42 -------- d-------- C:\Program Files\Fichiers communs\InstallShield
    2006-10-21 14:49 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\GRETECH
    2006-10-21 14:48 -------- d-------- C:\Program Files\GRETECH
    2006-10-21 14:47 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Media Player Classic
    2006-10-21 14:45 -------- d-------- C:\Program Files\K-Lite Codec Pack
    2006-10-21 01:51 73216 --a------ C:\WINDOWS\ST6UNST.EXE
    2006-10-21 01:51 249856 --------- C:\WINDOWS\Setup1.exe
    2006-10-21 01:47 -------- d-------- C:\Program Files\Winamp
    2006-10-21 01:47 -------- d-------- C:\Program Files\MUSK Codec Pack v5
    2006-10-20 17:14 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\vlc
    2006-10-15 17:42 301 --a------ C:\WINDOWS\Vue 5 Infinite.reg
    2006-10-15 17:30 974848 --a------ C:\WINDOWS\system32\mfc70.dll
    2006-10-15 17:30 487424 --a------ C:\WINDOWS\system32\msvcp70.dll
    2006-10-15 17:30 344064 --a------ C:\WINDOWS\system32\msvcr70.dll
    2006-10-15 17:28 -------- d-------- C:\Program Files\e-on software
    2006-10-15 16:59 -------- d-------- C:\Program Files\Fichiers communs\Adobe Systems Shared
    2006-10-15 16:59 -------- d-------- C:\Program Files\Fichiers communs\Adobe
    2006-10-15 16:53 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\mirage
    2006-10-15 16:18 -------- d-------- C:\Program Files\Windows Media Player
    2006-10-14 20:47 44 --a------ C:\WINDOWS\system32\msssc.dll
    2006-10-14 20:47 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Macromedia
    2006-10-14 20:40 -------- d-------- C:\Program Files\Java
    2006-10-14 20:15 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Ahead
    2006-10-14 19:56 -------- d-------- C:\Program Files\Azureus
    2006-10-14 19:43 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Google
    2006-10-14 19:42 -------- d-------- C:\Program Files\Google
    2006-10-14 19:40 -------- d-------- C:\Program Files\Giganology
    2006-10-14 19:37 -------- d-------- C:\Program Files\WinRAR
    2006-10-14 18:57 62 --ahs---- C:\Documents and Settings\metal.kanar\Application Data\desktop.ini
    2006-10-14 18:30 -------- d-------- C:\Program Files\Thomson
    2006-10-14 18:23 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Identities
    2006-10-14 18:05 -------- d--h----- C:\Program Files\WindowsUpdate
    2006-10-14 18:04 -------- d-------- C:\Program Files\Messenger
    2006-10-14 17:39 -------- d-------- C:\Program Files\GameSpy Arcade
    2006-10-12 23:27 -------- d-------- C:\Program Files\ESET
    2006-10-12 22:43 -------- d-------- C:\Program Files\Sunbelt Software
    2006-10-12 22:06 -------- d-------- C:\Program Files\VirtualDJ
    2006-10-12 19:09 -------- d-------- C:\Program Files\Movie Maker
    2006-10-12 19:09 -------- d-------- C:\Program Files\Internet Explorer
    2006-10-12 19:08 -------- d-------- C:\Program Files\NetMeeting
    2006-10-12 19:07 -------- d-------- C:\Program Files\Outlook Express
    2006-10-12 19:07 -------- d-------- C:\Program Files\Fichiers communs\System
    2006-10-12 17:14 -------- d-------- C:\Program Files\support.com
    2006-09-25 16:45 666240 --a------ C:\WINDOWS\system32\aswBoot.exe
    2006-09-25 16:37 90112 --a------ C:\WINDOWS\system32\AVASTSS.scr
    2006-09-13 22:14 593938 --a------ C:\WINDOWS\system32\x264vfw.dll

    (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

    *Note* empty entries are not shown

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
    "CTFMON.EXE"="C:\\WINDOWS\\System32\\ctfmon.exe"
    "MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"
    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"C:\\Program Files\\Fichiers communs\\Ahead\\lib\\NMBgMonitor.exe\""
    "MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
    "eMuleAutoStart"="C:\\coincoin\\eMule\\emule.exe -AutoStart"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
    "avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
    "SpeedTouch USB Diagnostics"="\"C:\\Program Files\\Thomson\\SpeedTouch USB\\Dragdiag.exe\" /icon"
    "ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
    "Gigaget"="\"C:\\Program Files\\Giganology\\Gigaget\\GigagetShell.exe\" /s"
    "NeroFilterCheck"="C:\\WINDOWS\\System32\\NeroCheck.exe"
    "SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe"
    "Smapp"="C:\\Program Files\\Analog Devices\\SoundMAX\\SMTray.exe"
    "SNPSTD2"="C:\\WINDOWS\\vsnpstd2.exe"
    "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
    "KernelFaultCheck"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,\
    65,6d,33,32,5c,64,75,6d,70,72,65,70,20,30,20,2d,6b,00
    "!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
    "DAEMON Tools"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033"

    [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
    "DeskHtmlVersion"=dword:00000110
    "DeskHtmlMinorVersion"=dword:00000005
    "Settings"=dword:00000001
    "GeneralFlags"=dword:00000000

    [HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
    "CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

    [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
    "CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
    "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
    "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
    "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
    "{3A947772-3B29-41DB-A436-4B5CAAECE2F6}"=""
    "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
    "NoDriveTypeAutoRun"=dword:00000091

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "dontdisplaylastusername"=dword:00000000
    "legalnoticecaption"=""
    "legalnoticetext"=""
    "shutdownwithoutlogon"=dword:00000001
    "undockwithoutlogon"=dword:00000001

    [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
    "NoDriveTypeAutoRun"=dword:00000091

    [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer\Run]

    [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
    "NoDriveTypeAutoRun"=dword:00000091

    [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer\Run]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
    "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
    "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
    "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
    "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

    HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wqjpxdex

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
    "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

    Contents of the 'Scheduled Tasks' folder
    C:\WINDOWS\tasks\AppleSoftwareUpdate.job
    C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job

    Completion time: 06-12-12 12:59:03.28
    C:\ComboFix.txt ... 06-12-12 12:59
    C:\ComboFix2.txt ... 06-10-26 00:33
    0
  9. Utilisateur anonyme
     
    Salut

    Clique sur démarrer, rechercher, cherche et supprime ces fichiers si présents:

    - x264vfw.dll
    - ksbar.exe
    - winsms.exe
    - fhm.exe
    - is941.exe

    Clique sur poste de travail, C:, program files et supprime ce dossier:

    - VSToolbar

    **Si un fichier persiste lors de la suppression fait ceci:
    -Redémarre ton PC. Dès l'allumage de celui-ci tapote la touche F8 (ou F5 si F8 ne fonctionne pas), à l'écran qui va apparaître choisit "mode sans echec" attends un peu.. puis va supprimer les fichiers/dossiers, vide ta corbeille et redémarre ton PC normalement

    Rends toi sur se site, en haut à droite clique sur "choose" tu vas dans C:, windows, system32 tu cherche le processus ci-dessous et tu cliques sur "ouvrir" dès que c'est fait tu cliques sur "send" tu attends un peu et colle le rapport ici une fois qu'il a terminé stp

    http://www.virustotal.com/en/virustotalx.html

    C:\WINDOWS\system32\msssc.dll < à analyser

    Mets à jour AVG anti-spyware et fait un scan complet de ton système, pusi colle le rapport ici stp

    Si tu as besoin d'aide avec Ewido(devenu AVG-antispyware) regarde ce tutoriel:
    http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html
    0
  10. alex
     
    aucune trace de
    is941.exe
    ksbar.exe

    Antivirus Version Update Result
    AntiVir 7.3.0.15 12.13.2006 no virus found
    Authentium 4.93.8 12.13.2006 no virus found
    Avast 4.7.892.0 12.13.2006 no virus found
    AVG 386 12.13.2006 no virus found
    BitDefender 7.2 12.13.2006 no virus found
    CAT-QuickHeal 8.00 12.13.2006 no virus found
    ClamAV devel-20060426 12.13.2006 no virus found
    DrWeb 4.33 12.13.2006 no virus found
    eSafe 7.0.14.0 12.13.2006 no virus found
    eTrust-InoculateIT 23.73.84 12.13.2006 no virus found
    eTrust-Vet 30.3.3248 12.13.2006 no virus found
    Ewido 4.0 12.13.2006 no virus found
    Fortinet 2.82.0.0 12.13.2006 no virus found
    F-Prot 3.16f 12.13.2006 no virus found
    F-Prot4 4.2.1.29 12.13.2006 no virus found
    Ikarus T3.1.0.26 12.13.2006 no virus found
    Kaspersky 4.0.2.24 12.13.2006 no virus found
    McAfee 4918 12.13.2006 no virus found
    Microsoft 1.1804 12.13.2006 no virus found
    NOD32v2 1920 12.13.2006 no virus found
    Norman 5.80.02 12.13.2006 no virus found
    Panda 9.0.0.4 12.13.2006 no virus found
    Prevx1 V2 12.13.2006 no virus found
    Sophos 4.12.0 12.13.2006 no virus found
    Sunbelt 2.2.907.0 11.30.2006 no virus found
    TheHacker 6.0.3.131 12.10.2006 no virus found
    UNA 1.83 12.13.2006 no virus found
    VBA32 3.11.1 12.13.2006 no virus found
    VirusBuster 4.3.15:9 12.13.2006 no virus found

    Aditional Information
    File size: 44 bytes
    MD5: 249cb7009ab09bc0ca236869ba118a72
    SHA1: 0e8779963ee8edb633dfabf717be29960bee4fde

    ********************

    ---------------------------------------------------------
    AVG Anti-Spyware - Rapport d'analyse
    ---------------------------------------------------------

    + Créé à: 23:33:06 13/12/2006

    + Résultat de l'analyse:

    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@247realmedia[2].txt -> TrackingCookie.247realmedia : Aucune action entreprise.
    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@adbrite[2].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@adtech[2].txt -> TrackingCookie.Adtech : Aucune action entreprise.
    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@bluestreak[2].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@as-eu.falkag[2].txt -> TrackingCookie.Falkag : Aucune action entreprise.
    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@fastclick[2].txt -> TrackingCookie.Fastclick : Aucune action entreprise.
    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@mediaplex[1].txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Aucune action entreprise.
    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@statcounter[1].txt -> TrackingCookie.Statcounter : Aucune action entreprise.
    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.
    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
    C:\WINDOWS\YazzleBundle-1125.exe -> Trojan.PurityAd.c : Aucune action entreprise.

    Fin du rapport
    0
  11. Utilisateur anonyme
     
    Fait ce nettoyage: (à faire réguliérement)

    ¤Telecharge et installe CCleaner (n'installe pas la barre d'outil Yahoo)
    ---> Ccleaner

    dans la colonne de gauche clic sur "erreurs" coches toutes les cases, puis cliques en bas sur "chercher des erreurs" une fois finit, cliques sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs.
    Les sauvegardes que tu aura faites tu pourra les supprimer si ton ordinateur n'a plus de problémes

    ¤Relance Ccleaner, vas dans l'onglet "nettoyeur" present sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis clic sur "lancer le nettoyage"

    Si tu as besoin d'aide pour Ccleaner, regarde ce tutoriel:
    http://www.tutopat.com/viewtopic.php?t=305

    Refait un scan complet avec Ewido et "delete" tout ce qu'il te trouve
    0